概况 用友NC产品是面向集团企业的世界级高端管理软件，市场占有率在同类产品中已经达到亚太第一，已在8000家集团企业中应用，国内用户涵盖大多数关键基础设施运营单位。用友NC综合利用最新的互联网技术、云计算技术、移动应用技术等，通过构建大企业私有云来全面满足集团企业管理、全产业链管控和电子商务运营，成为大型集团企业生产运营中必备的一环，其安全性至关重要，一旦攻击者成功攻破该系统，不仅可以获取企业集团财务人员相关信息和运行数据，极易造成公司重要信息泄露，给公司带来极其不良的社会影响和经济损失；而且还可以作为突破口，进一步向基础设施运营企业的生产运营网络渗透，严重危害基础设施网络的生产安全。….
Source link
【安全通报】用友NC反序列化远程命令执行漏洞
RELATED STORIES
Discovery / credits: Malvuln – malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/5f79b779acd4c9c75211835a2783bccb.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln
...
Details Moshe Kol and Shlomi Oberman discovered that Dnsmasq incorrectly handledmemory when sorting RRsets. A...
Принудительное развертывание патча для уязвимости Zerologon начнется в феврале 14:26 / 18 Января, 2021 2021-01-18T15:26:36+03:00...
The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a...
Executive Summary This vulnerability is currently undergoing analysis and not all information is available. Please...
Microsoft addresses important severity remote code execution vulnerabilities affecting multiple Office products in the January...
A vulnerability in the Secure FTP (SFTP) of Cisco StarOS for Cisco ASR 5000 Series...
Microsoft has patched a zero-day bug in Windows Defender being actively exploited in the wild,...
La pandémie globale a accéléré le mouvement des utilisateurs, équipements, applications et données en dehors...
Executive Summary This vulnerability is currently undergoing analysis and not all information is available. Please...
You must be logged in to post a comment.